Jetpack 2.0-4.0.2 - Shortcode Stored Cross-Site Scripting (XSS)

2016-05-2600:00:00

ethicalhack3r

wpscan.com

0.001 Low

EPSS

Percentile

26.2%

JSON

The Jetpack – WP Security, Backup, Speed, & Growth WordPress plugin was affected by a Shortcode Stored Cross-Site Scripting (XSS) security vulnerability.

CPENameOperatorVersion
jetpacklt4.0.3

CPE	Name	Operator	Version
	jetpack	lt	4.0.3

References

wptavern.com/jetpack-4-0-3-patches-a-critical-xss-vulnerability

blog.sucuri.net/2016/05/security-advisory-stored-xss-jetpack-2.html

jetpack.com/2016/05/27/jetpack-4-0-3-critical-security-update/

0.001 Low

EPSS

Percentile

26.2%

JSON

Related for WPVDB-ID:957AB0B9-2ACB-4F46-93E6-30AD4FCB7FEF